From 6bf1319a30545a33c9183c56d7c1d0d16d42dea5 Mon Sep 17 00:00:00 2001
From: Rodrigo Mesquita <rodrigo.m.mesquita@gmail.com>
Date: Tue, 10 Dec 2024 23:32:34 +0000
Subject: [PATCH] services.plausible: Support Google Integration

---
 nixos/modules/services/web-apps/plausible.nix | 29 ++++++++++++++++++-
 1 file changed, 28 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/services/web-apps/plausible.nix b/nixos/modules/services/web-apps/plausible.nix
index 1f909bbd67a36..c2f832212f4f5 100644
--- a/nixos/modules/services/web-apps/plausible.nix
+++ b/nixos/modules/services/web-apps/plausible.nix
@@ -160,6 +160,27 @@ in {
         };
       };
     };
+
+    googleOAuth = {
+      clientId = mkOption {
+        default = null;
+        type = types.str;
+        description = ''
+          The GOOGLE_CLIENT_ID from Google Cloud OAuth, as seen in
+          https://github.com/plausible/community-edition/wiki/google-integration
+        '';
+      };
+
+      clientSecretFile = mkOption {
+        default = null;
+        type = types.str;
+        description = ''
+          The path to a file containing the GOOGLE_CLIENT_SECRET from Google
+          Cloud OAuth, as seen in
+          https://github.com/plausible/community-edition/wiki/google-integration
+        '';
+      };
+    };
   };
 
   imports = [
@@ -261,6 +282,8 @@ in {
             SELFHOST = "true";
           } // (optionalAttrs (cfg.mail.smtp.user != null) {
             SMTP_USER_NAME = cfg.mail.smtp.user;
+          }) // (optionalAttrs (cfg.googleOAuth.clientId != null) {
+            GOOGLE_CLIENT_ID = cfg.googleOAuth.clientId;
           });
 
           path = [ cfg.package ]
@@ -276,6 +299,9 @@ in {
             ${lib.optionalString (cfg.mail.smtp.passwordFile != null)
               ''export SMTP_USER_PWD="$(< $CREDENTIALS_DIRECTORY/SMTP_USER_PWD )"''}
 
+            ${lib.optionalString (cfg.googleOAuth.clientSecretFile != null)
+              ''export GOOGLE_CLIENT_SECRET="$(< $CREDENTIALS_DIRECTORY/GOOGLE_CLIENT_SECRET )"''}
+
             ${lib.optionalString cfg.database.postgres.setup ''
               # setup
               ${cfg.package}/createdb.sh
@@ -299,7 +325,8 @@ in {
             LoadCredential = [
               "ADMIN_USER_PWD:${cfg.adminUser.passwordFile}"
               "SECRET_KEY_BASE:${cfg.server.secretKeybaseFile}"
-            ] ++ lib.optionals (cfg.mail.smtp.passwordFile != null) [ "SMTP_USER_PWD:${cfg.mail.smtp.passwordFile}"];
+            ] ++ lib.optionals (cfg.mail.smtp.passwordFile != null) [ "SMTP_USER_PWD:${cfg.mail.smtp.passwordFile}"]
+              ++ lib.optionals (cfg.googleOAuth.clientSecretFile != null) [ "GOOGLE_CLIENT_SECRET:${cfg.googleOAuth.clientSecretFile}" ];
           };
         };
       }